CVE-2025-63704

Description

NPM package query-parser-string 1.0.0 is vulnerable to Prototype Pollution. The package does not properly sanitize user supplied query parameters and merges them to the newly created object.

Traduire en français

Scores CVSS

Faiblesses (CWE)

• CWE-1321

Références

• https://gist.github.com/6en6ar/d62f614dbb2b1032b5e45a56fe26ec8b
• https://github.com/victorteokw/query-string-parser/issues/3
• https://www.npmjs.com/package/query-string-parser?activeTab=readme

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories